@khoavu882/doflow 2.0.0-beta.5 → 2.0.1

package/core/registry/settings.json

@@ -0,0 +1,272 @@
+{
+  "version": 1,
+  "description": "DoFlow settings keys: type, allowed values, defaults, which layer may set each, how layers combine, fail-safe and bindings. Read by src/runtime/settings/registry.js; files use flat dotted keys (settings.json, settings.local.json).",
+  "keys": {
+    "advice.enabled": { "type": "boolean", "order": [false, true], "default": false,
+      "scope": "narrow-only", "combine": "override", "securityRelevant": true, "failSafe": false,
+      "requires": [{ "when": true, "key": "advice.model", "view": "global" }],
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false,
+      "legacy": [{ "layer": "user", "kind": "decision-model", "path": "decision-model.json", "field": "enabled" },
+                 { "layer": "project", "kind": "decision-model", "path": "decision-model.json", "field": "enabled" }],
+      "consumers": ["src/runtime/advice/config.js"], "description": "Turns the local decision model on; a project may only turn it off." },
+    "advice.provider": { "type": "enum", "valuesRef": "advice.providerIds", "default": "ollama",
+      "scope": "global-only", "combine": "override", "securityRelevant": true, "failSafe": { "gate": "advice.enabled" },
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false,
+      "legacy": [{ "layer": "user", "kind": "decision-model", "path": "decision-model.json", "field": "provider" },
+                 { "layer": "project", "kind": "decision-model", "path": "decision-model.json", "field": "provider" }],
+      "consumers": ["src/runtime/advice/config.js"], "description": "Decision-model provider id from advice.json." },
+    "advice.endpoint": { "type": "url", "defaultRef": "advice.providerDefaultEndpoint",
+      "scope": "global-only", "combine": "override", "securityRelevant": true, "failSafe": { "gate": "advice.enabled" },
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false,
+      "legacy": [{ "layer": "user", "kind": "decision-model", "path": "decision-model.json", "field": "endpoint" },
+                 { "layer": "project", "kind": "decision-model", "path": "decision-model.json", "field": "endpoint" }],
+      "consumers": ["src/runtime/advice/config.js"], "description": "Decision-model endpoint; default is the provider's defaultEndpoint." },
+    "advice.model": { "type": "string", "default": null, "scope": "project-overridable", "combine": "override",
+      "securityRelevant": true, "failSafe": { "gate": "advice.enabled" }, "env": null, "flag": null, "shellRead": null, "needsConfigHome": false,
+      "legacy": [{ "layer": "user", "kind": "decision-model", "path": "decision-model.json", "field": "model" },
+                 { "layer": "project", "kind": "decision-model", "path": "decision-model.json", "field": "model" }],
+      "consumers": ["src/runtime/advice/config.js"], "description": "Decision-model name; a project may choose it while advice is on." },
+    "advice.kinds.tier": { "type": "enum", "values": ["off", "shadow", "act"], "default": null,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false, "failSafe": "off",
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/advice/shadow-config.js"],
+      "description": "Advice mode for the tier kind: off, shadow (record only) or act; unset keeps the kind's own path, the highest layer that sets it decides and an invalid value is off." },
+    "advice.kinds.task-class": { "type": "enum", "values": ["off", "shadow", "act"], "default": null,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false, "failSafe": "off",
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/advice/shadow-config.js"],
+      "description": "Advice mode for the task-class kind: off, shadow (record only) or act; unset keeps the kind's own path, the highest layer that sets it decides and an invalid value is off." },
+    "advice.kinds.verify-risk": { "type": "enum", "values": ["off", "shadow", "act"], "default": null,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false, "failSafe": "off",
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/advice/shadow-config.js"],
+      "description": "Advice mode for the verify-risk kind: off, shadow (record only) or act; unset keeps the kind's own path, the highest layer that sets it decides and an invalid value is off." },
+    "advice.kinds.review-depth": { "type": "enum", "values": ["off", "shadow", "act"], "default": null,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false, "failSafe": "off",
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/advice/shadow-config.js"],
+      "description": "Advice mode for the review-depth kind: off, shadow (record only) or act; unset keeps the kind's own path, the highest layer that sets it decides and an invalid value is off." },
+    "advice.kinds.mcp-need": { "type": "enum", "values": ["off", "shadow", "act"], "default": null,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false, "failSafe": "off",
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/advice/shadow-config.js"],
+      "description": "Advice mode for the mcp-need kind: off, shadow (record only) or act; unset keeps the kind's own path, the highest layer that sets it decides and an invalid value is off." },
+    "advice.kinds.followup-triage": { "type": "enum", "values": ["off", "shadow", "act"], "default": null,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false, "failSafe": "off",
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/advice/shadow-config.js"],
+      "description": "Advice mode for the followup-triage kind: off, shadow (record only) or act; unset keeps the kind's own path, the highest layer that sets it decides and an invalid value is off." },
+    "advice.models.tier": { "type": "string", "default": null,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/advice/shadow-config.js"],
+      "description": "Decision-model name for the tier kind; unset uses advice.model." },
+    "advice.models.task-class": { "type": "string", "default": null,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/advice/shadow-config.js"],
+      "description": "Decision-model name for the task-class kind; unset uses advice.model." },
+    "advice.models.verify-risk": { "type": "string", "default": null,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/advice/shadow-config.js"],
+      "description": "Decision-model name for the verify-risk kind; unset uses advice.model." },
+    "advice.models.review-depth": { "type": "string", "default": null,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/advice/shadow-config.js"],
+      "description": "Decision-model name for the review-depth kind; unset uses advice.model." },
+    "advice.models.mcp-need": { "type": "string", "default": null,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/advice/shadow-config.js"],
+      "description": "Decision-model name for the mcp-need kind; unset uses advice.model." },
+    "advice.models.followup-triage": { "type": "string", "default": null,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/advice/shadow-config.js"],
+      "description": "Decision-model name for the followup-triage kind; unset uses advice.model." },
+    "storage.prune": { "type": "enum", "values": ["off", "on"], "order": ["off", "on"], "default": "on",
+      "scope": "project-overridable", "combine": "override", "views": ["project", "global"], "securityRelevant": false,
+      "failSafe": "off", "env": null, "flag": null, "shellRead": null, "needsConfigHome": false,
+      "legacy": [{ "layer": "user", "kind": "line-onoff", "path": "prune" }, { "layer": "project", "kind": "line-onoff", "path": "prune" }],
+      "consumers": ["src/runtime/storage/roots.js", "src/runtime/storage/upkeep.js", "src/runtime/storage/cli.js", "src/runtime/lifecycle/retention.js"],
+      "description": "Storage pruning; project value applies to project roots only." },
+    "storage.retentionHours": { "type": "integer", "min": 1, "defaultRef": "storage.lifecycleEventsDefaultHours",
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false, "failSafe": { "state": "invalid" },
+      "env": { "name": "DOFLOW_RETENTION_HOURS", "parse": "positive-int", "direction": "any" },
+      "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/lifecycle/retention.js"], "description": "Lifecycle-events window in hours; an explicit value applies even while pruning is off." },
+    "failure.capture": { "type": "enum", "values": ["off", "on"], "order": ["off", "on"], "default": "on",
+      "scope": "global-only", "combine": "narrowest", "securityRelevant": false, "failSafe": "off",
+      "env": { "name": "DOFLOW_FAILURE_CAPTURE", "parse": "off-words", "direction": "narrow" },
+      "flag": null, "shellRead": "lexical-v1", "needsConfigHome": true,
+      "legacy": [{ "layer": "user", "kind": "sentinel", "path": "failures/off", "value": "off" }],
+      "consumers": ["src/runtime/failure/home.js"], "description": "Capture of DoFlow's own failures on this machine; any layer saying off wins." },
+    "autopilot.enabled": { "type": "enum", "values": ["off", "on"], "order": ["off", "on"], "default": "off",
+      "scope": "global-only", "combine": "override", "securityRelevant": true, "failSafe": "off",
+      "env": { "name": "DOFLOW_AUTOPILOT_ENABLED", "parse": "off-words", "direction": "narrow" },
+      "flag": null, "shellRead": null, "needsConfigHome": true,
+      "legacy": [{ "layer": "user", "kind": "sentinel", "path": "autopilot/off", "value": "off" }],
+      "consumers": ["src/runtime/settings/autopilot.js"],
+      "description": "Roadmap autopilot kill switch, off until the owner turns it on; the env and the autopilot/off sentinel can only turn it off." },
+    "hooks.harnesses": { "type": "string-list", "valuesRef": "harnesses.ids", "maxItems": 16, "maxLength": 32, "default": ["claude", "codex", "antigravity", "pi"],
+      "scope": "global-only", "combine": "override", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/lifecycle/hook-tier.js"],
+      "description": "Harness ids that get DoFlow's hooks, gates and bridge; every other harness gets content only (guidance, skills, agents, MCP), and its DoFlow hooks are removed on the next install or update. An invalid list keeps the default." },
+    "verify.reuse": { "type": "enum", "values": ["off", "on"], "order": ["off", "on"], "default": "off",
+      "scope": "global-only", "combine": "override", "securityRelevant": true, "failSafe": "off",
+      "env": { "name": "DOFLOW_VERIFY_REUSE", "parse": "off-words", "direction": "narrow" },
+      "flag": null, "shellRead": null, "needsConfigHome": true, "legacy": [],
+      "consumers": ["src/runtime/verification/engine.js"],
+      "description": "Reuse of a recorded PASS at L1/L2 when the check key is unchanged, off until the owner turns it on; the env can only turn it off." },
+    "dispatch.fallback": { "type": "enum", "values": ["off", "ask"], "order": ["off", "ask"], "default": "ask",
+      "scope": "narrow-only", "combine": "override", "securityRelevant": false, "failSafe": "off",
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/dispatch/command.js"],
+      "description": "Quota fallback ladder default for dispatch runs: ask holds and proposes, off holds without a proposal; auto exists only per run via --fallback." },
+    "workers.billing": { "type": "worker-billing", "default": null,
+      "scope": "global-only", "combine": "override", "securityRelevant": true, "failSafe": { "state": "invalid" },
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": true, "legacy": [],
+      "consumers": ["src/runtime/settings/worker-billing.js"],
+      "description": "Person-written billing record per headless worker id: free or metered, with the date asserted. Lets dispatch --billing-cap free launch a worker the registry lists as unknown; global-only." },
+    "review.preset": { "type": "enum", "valuesRef": "protocols.reviewPresetIds", "orderRef": "protocols.reviewPresetOrder", "default": "review-single",
+      "scope": "narrow-only", "combine": "override", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/review/resolve-protocol.js"],
+      "description": "Review protocol preset: review-single by default, 1 seat and 1 round; auto follows the risk rule; review-deep is 2 seats; a project may only pick a stricter preset than its user." },
+    "review.rounds": { "type": "integer", "min": 1, "max": 3, "order": "descending", "default": null,
+      "scope": "narrow-only", "combine": "override", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/review/resolve-protocol.js"],
+      "description": "Review rounds; unset uses the preset's rounds, a project may only choose more rounds than its user layer." },
+    "review.sameFamily": { "type": "enum", "values": ["refuse", "warn"], "order": ["refuse", "warn"], "default": "warn",
+      "scope": "narrow-only", "combine": "override", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/review/resolve-protocol.js"],
+      "description": "Whether a reviewer seat from the author's model family is refused or only warned about; a project may only choose refuse." },
+    "review.crossFamilyRereview": { "type": "enum", "values": ["on", "off"], "order": ["on", "off"], "default": "on",
+      "scope": "narrow-only", "combine": "override", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/review/resolve-protocol.js"],
+      "description": "Cross-family re-review of a changed record; a project may only keep it on." },
+    "review.extraLenses": { "type": "string-list", "valuesRef": "protocols.lensIds", "maxItems": 4, "maxLength": 40, "default": [],
+      "scope": "project-overridable", "combine": "union", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/review/resolve-protocol.js"],
+      "description": "Lens ids added to every review seat; lists from all layers add up and never remove." },
+    "review.blockerClauses": { "type": "string-list", "maxItems": 8, "maxLength": 200, "default": [],
+      "scope": "project-overridable", "combine": "union", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/review/resolve-protocol.js"],
+      "description": "Extra project rules a reviewer must treat as blockers; lists from all layers add up and never remove." },
+    "debate.preset": { "type": "enum", "valuesRef": "protocols.debatePresetIds", "default": "debate-2",
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/review/resolve-protocol.js"],
+      "description": "Debate protocol preset for this project." },
+    "primary.harness": { "type": "enum", "valuesRef": "harnesses.primaryIds", "default": "unknown",
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "env": { "name": "DOFLOW_PRIMARY_HARNESS", "parse": "verbatim", "direction": "any" },
+      "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/context/primary.js"],
+      "description": "Which harness the main session runs, so DoFlow can tell the primary from its workers; unknown means undeclared." },
+    "primary.model": { "type": "model-id", "default": null,
+      "scope": "project-overridable", "combine": "override", "securityRelevant": false,
+      "env": { "name": "DOFLOW_PRIMARY_MODEL", "parse": "verbatim", "direction": "any" },
+      "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/context/primary.js"],
+      "description": "Model the main session runs, as the harness names it; a declaration the hook probe checks where it can." },
+    "primary.onContradiction": { "type": "enum", "values": ["refuse", "warn"], "order": ["refuse", "warn"], "default": "warn",
+      "scope": "narrow-only", "combine": "override", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/context/primary.js"],
+      "description": "What happens when the probe sees a model other than the declared one: warn, or refuse; a project may only choose refuse." },
+    "workers.enabled": { "type": "worker-list", "valuesRef": "workers.ids", "defaultRef": "workers.defaultRungs",
+      "scope": "narrow-only", "combine": "subset", "securityRelevant": true, "failSafe": { "state": "invalid" },
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/worker/active.js"],
+      "description": "Ordered list of worker ids a run may use, optionally ending in primary; a project can only remove entries." },
+    "workers.models": { "type": "worker-models", "valuesRef": "workers.ids", "tiersRef": "models.tierIds", "default": null,
+      "scope": "global-only", "combine": "override", "securityRelevant": true, "failSafe": { "state": "invalid" },
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": true, "legacy": [],
+      "consumers": ["src/runtime/worker/models.js"],
+      "description": "Person-written model per worker and tier; a worker or tier not listed keeps the harness default." },
+    "models.enabled": { "type": "model-list", "default": [],
+      "scope": "project-overridable", "combine": "subset", "direction": "narrow-only", "securityRelevant": false,
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/worker/models.js"],
+      "description": "Allow-list of models permitted for task bindings and dispatch rungs." },
+    "packages.disabled": { "type": "string-list", "valuesRef": "packages.ids", "unknownMembers": "warn", "maxItems": 32, "maxLength": 32, "default": [],
+      "scope": "project-overridable", "combine": "union", "securityRelevant": false, "failSafe": { "state": "invalid" },
+      "env": null, "flag": null, "shellRead": null, "needsConfigHome": false, "legacy": [],
+      "consumers": ["src/runtime/packages/view.js"],
+      "description": "Package ids turned off for this view; lists from all layers add up, so a project can only turn packages off." },
+    "rollout.profile": {
+      "type": "enum",
+      "values": ["baseline", "canary", "staged", "full"],
+      "order": ["baseline", "canary", "staged", "full"],
+      "default": "baseline",
+      "scope": "project-overridable",
+      "combine": "override",
+      "securityRelevant": false,
+      "failSafe": "baseline",
+      "env": {
+        "name": "DOFLOW_ROLLOUT_PROFILE",
+        "parse": "verbatim",
+        "direction": "any"
+      },
+      "flag": null,
+      "shellRead": null,
+      "needsConfigHome": false,
+      "legacy": [],
+      "consumers": ["src/runtime/profiles/resolve.js"],
+      "description": "Active rollout profile governing retrieval, decision advisor, code graph, and verification automation."
+    },
+    "team.writerCap": {
+      "type": "integer",
+      "min": 1,
+      "max": 8,
+      "order": "ascending",
+      "default": 1,
+      "scope": "project-overridable",
+      "combine": "override",
+      "securityRelevant": false,
+      "failSafe": 1,
+      "env": {
+        "name": "DOFLOW_TEAM_WRITER_CAP",
+        "parse": "positive-int",
+        "direction": "any"
+      },
+      "flag": null,
+      "shellRead": null,
+      "needsConfigHome": false,
+      "legacy": [],
+      "consumers": ["src/runtime/team/admission.js"],
+      "description": "Maximum number of concurrent mutating worker sessions across the active task graph; 1 by default, so writes run single-threaded and reads in parallel; the user may raise it."
+    },
+    "team.maxAttempts": {
+      "type": "integer",
+      "min": 1,
+      "max": 10,
+      "order": "ascending",
+      "default": 3,
+      "scope": "project-overridable",
+      "combine": "override",
+      "securityRelevant": false,
+      "failSafe": 3,
+      "env": {
+        "name": "DOFLOW_TEAM_MAX_ATTEMPTS",
+        "parse": "positive-int",
+        "direction": "any"
+      },
+      "flag": null,
+      "shellRead": null,
+      "needsConfigHome": false,
+      "legacy": [],
+      "consumers": ["src/runtime/team/admission.js"],
+      "description": "Maximum attempt count permitted for any single plan task before escalating to operator intervention."
+    }
+  }
+}